IN THE CLAIMS : 

Please amend the claims, as follows: 

Claim 1 (currently amended): A server that provides service to a client, comprising: 

a public-key storage unit for storing a public key assigned to each service; 

a challenge generator for generating a challenge to be sent from the server to the 
client after the server receives a request for the service from the client; and 

an access privilege verifier for verifying, using a corresponding public key, whether 
a prescribed relationship exists between the challenge and a response to that challenge 
received from the client; 

wherein the response is calculated based on a unique operation for the client and 
access privilege proving data that data is created from a private key corresponding to the 
public key[[,]] assigned to the each service of the server . 

Claims 2-8 (canceled). 

Claim 9 (previously presented): A server as recited in claim 1 , wherein the server 
is a web server that supplies a web application to the client; and the public key is assigned 
to an individual web page. 

Claim 10 (canceled). 

Claim 1 1 (previously presented): A server as recited in claim 1 , wherein the server 
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is a web server that supplies a web application to clients; and the public key is assigned 
to groups of web pages and is to verify the access privileges of the client for the web page 
when the server receives a request from the client to access a web page in one of the 
groups of web pages. 

Claim 12 (canceled). 

Claim 1 3 (previously presented): A server as recited in claim 1 , further comprising: 
a script interpreter for interpreting script designed to control the contents of service. 

Claims 14-15 (canceled). 

Claim 16 (currently amended): A method executed in a server for providing service 
to a client whererin wherein a public key is assigned in advance to a service provided by 
the server, the method comprising the steps of: 

generating a challenge when a request for the service is received from the client; 

transmitting the challenge to the client; receiving a response to the challenge from 
the client; 

verifying whether a prescribed relationship exists between the challenge and the 
response by using the public key assigned to the requested service; and 

providing the requested service to the client only when the prescribed relationship 
exists[[.]]; 

wherein the response is calculated based on a unique operation for the client and 
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access privilege proving data that is created from a private key corresponding to the public 
key assigned to the service of the server . 

Claim 1 7 (currently amended): A method executed in a client for requesting service 
to a server, the method comprising the steps of: 
receiving a challenge from the server; 

executing a unique operation assigned to the client wherein the unique operation 
is unique to the client; 

generating a response based on the challenge received from the server, the result 
of the unique operation , and access privilege data that is created from a private key 
corresponding to the public key assigned to the service of the server : and 

transmitting the response to the server. 

Claims 18-21 (canceled). 

Claim 22 (currently amended): A system comprising: 
a server that provides service to a client; 

the server further comprising: 
a public-key storage unit that stores a public key assigned to the service; 
a challenge generator that generates a challenge to be sent from the server to the 
client after the server receives a request for the service from the client; 

an access privilege verifier that verifies whether a prescribed relationship exists 
between the challenge and a response, the response being corresponding to the challenge 
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and received from the client[[,]] _j_ and 

the client that requests the service to the server; 
the client further comprising: 

an unique operation executer that executes an unique operation assigned to the 

client; 

a response generator that generates the response to the challenge, the challenge 
being received from the server; 

wherein the response is calculated based on the unique operation and access 
privilege data that is created from a private key corresponding to the public key assigned 
to the service of the server , and the unique operation is unique to the client. 

Claim 23 (previously presented): The system according to claim 22, wherein the 
server sends the challenge to the client with a condition for using the service. 

Claim 24 (previously presented): The system according to claim 22, wherein the 
unique operation is used under conditions that a common cryptographic hash function is 
assigned to all clients and different data is assigned to each client. 

Claim 25 (currently amended): A client that requests service to a server, 
comprising: 

an unique operation executor that executes a unique operation assigned to the 

client; 

an access privilege proving data storage unit that stores access privilege proving 
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provid i ng data, the access privilege proving prov i ding data being created from a private key 
corresponding to a public key assigned to the requested service and result of a same the 
unique operation to one executed bvthe unioue operation executor ; 

a response generator that generates the response to the challenge, the challenge 
being received from the server[[,]] _l and 

wherein the response is calculated based on result of the unique operation and the 
access privilege proving prov i d i ng data, and unique operation is unique to the client. 

Claim 26 (previously presented): The client according to claim 25, wherein the 
access privilege providing data storage unit is included in a portable device. 
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